A POC about how to detect windows kernel debug by pool tag.
Query system pool tag information matches TagUlong == 'oIdK'.
Tested in Win10 1809
- Visual Studio 2019
- llvm-msvc [link]
POC about how to detect windows kernel debug by pool tag.
License
gmh5225/AntiKernelDebug-POC
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
POC about how to detect windows kernel debug by pool tag.
Topics
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published